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a first service profile before a user session starts, char- 
acterized in that the service profile is dynamically varied 
in the course of the session. 




MULTIFUNCTIONAL 
HHfcHAID LOGIC 
(MPL) 



AUTHENTIFICATION 
(RADIUS SERVER) 




26 20 




NETWORK 
SERVICE 
SWITCH 
(NSS) 



CONTENT AND 
POLICY 
SELECTION 
PORTAL 
(P3P) 



/ \ 




Printed by Jouve. 75001 PARIS (FR) 



BNSOOCIO: <EP._..124e445A 1 .1 . > 



1 



EP 1 246 445 A1 



2 



Description 

BACKGROUND OF THE INVENTION 

[0001] The Invention relates to a method of providing 
telecommunications services, wherein users are au- 
thenticated and authorized to a first service profile be- 
fore a user session starts, characterized in that the serv- 
ice profile is dynamically varied In the course of the ses- 
sion. 

[0002] More particularly, invention relates to a method 
of providing telecommunications services to authenti- 
cated users with flexible billing options such as prepaid 
or postpaid in realtime, near-realtime, or non-reiltime. 
The method applies to all telecommunications services, 
where users which are identified with a user-ID or any 
other unique Identification are authenticated before the 
start of a user session In a way that allows to present a 
bill lo the owner (subscriber) of the User-ID, which the 
subscriber will be obliged to pay under normal circum- 
stances (no repudiation). 

[0003] The following are examples of User-IDs, where 
the method applies. 

1) "Username" - In RADIUS Accounting Start Re- 
quest and RADIUS Accounting Stop Request Of In- 
ternet Protocol (IP) dial-in services and other Inter- 
net Access Services using the dial-in paradigm. It 
should be noted that for authentication an additional 
authentication token such asapassword Is required 
when authenticating using the standard RADIUS 
protocol (RADIUS = Remote Authentication Dial-in 
User Service) 

2) "IMS" - International Mobile Subscriber Identifi- 
cation. It should be noted that the proliferation of the 
"IMSI" by a mobile network implies the user has al- 
ready been pre-authentlcated successfully, there- 
fore no separate password or other authentication 
token Is required. 

3) "CLID" Calling Line Identification in the PSTN 
identifying who originated the telephone or online 
dialup call. Again, the CUD has already been pre- 
authentlcated and It's presence In a call setup re- 
quest (such as an SS7 lAM - Initial Ad-ress Mes- 
sage) is therefore alone surricienl for authentication 
of the user. 

[0004] If accounting or billing applies, then a "user 
session" may be defined as follows: The session starts 
when the billing system is informed by a network cle- 
ment, that accounting (and thus real-lme billing) shall 
take effect for this user immi-dlately (e.g. via a RADIUS 
accounting request). Alternatively, if the n twork ele- 
ment provides an accural time stamp, the session 
starts at the time of the time stamp. The session ends, 
when the billing system is informed by the network ele- 



ment, that accounting (and thus real-time billing) shall 
stop for this user immediately (e.g. via a RADIUS ac- 
counting stop request). Alternatively, if the network ele- 
ment provides an accurate time stamp, the session en- 

5 da at the time of the time stamp. It should be explicitly 
noted that a telephone call - Including Is considered to 
be a session in the context of this application. 
[0005] When a user subscribes to a telecommunica- 
tions servrce, a user-ID will be assigned and a user 

10 record will be stored in a user database, which will allow 
the service provider to store: the data required for pro- 
ducing the bill and to retrieve this data for billing purpos- 
es using the user-ID as key for efficiently accessing the 
database. 

15 [0006] The network element which originates the ac- 
counting start request at the beginning of the session 
and the accounting stop request at the end of the ses- 
sion is called Network Service Switch (NSS), The NSS 
sends an accoundng start request after the user has 

20 been successfully authenticated and has been author- 
ized with an (initial) service policy. The NSS fomns the 
subscriber edge of an I P network and enforces the serv- 
ice policy that the user has subscribed to. Access to the 
NSS may be achieved through various tolocommunica- 

25 tlon systems, either over wireless access networks (e. 
g. UMTS, GPRS, GSM, CDMA, wireless LAN, satellite, 
etc), or over wireline networks (e.g. xDSL, ATM, cable 
networks, Frame Relay networks, IP based access net- 
works. Frame Relay, leased line (PDH or SDH), fibre 

30 networks, Ethernet networks, or the Public Switched 
Telephone Network (PSTN) via dial-methods). In case 
the access networi< Is itself already IP based, standard 
tunneling protocols such as L2TP (Iayer2 tunnelling pro- 
tocol) or PPP over Ethernet, or GTP in UMTS or GRPS 

35 networks may be used to move the subscriber edge to 
the NSS (Network Service Switch). 
[0007] During user authentication, the user sends his 
user-ID and optionally also an authentication token such 
as a password to the NSS. In case the user has already 

40 been pe-authenticated In the access network (which 
could belong to the same or a different service provider), 
it may be sufficient for authentication that the user or the 
other service provider sends his user-ID). This would 
usually be sufficient, if the access network belongs to 

"^5 the same service provider or If an inkasso agreement 
existed between the service providers, that would allow 
the service provider lo bill via the service provider of the 
access network, 

[0008] The NSS may have a policy to always success- 
50 fully autbenticate users with pre-authentlcated user-IDs. 
For example, this is often the case in telephone net- 
works offering so-called open call by call services as 
available in Gennany. Alternatively, the NSS may have 
a policy to only successfully authenticate pre-authonti- 
55 cated user-IDs which are also listed on a so-called white 
list provisioned by the service provider with the user-IDs 
of subscribers. For example this is th case for so-called 
closed call by call services offered by many German 6p- 
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emtors only to users that have previously subscribed to 
the service with the alternate operator. 
[0009] Alternatively, die NSS may have a policy to not 
always successfully authenticate, rather authenticate 
the user only when in addition an authentication token 
is provided such as a password or one of the other ex- 
amples listed below, which can be checked using a local 
or remote user database, and the user will only be suc- 
cessfully authenticated, if the user-ID and authentica- 
tion token provided are fully matching (or at least suffi- 
ciently enough In case of biometric data based authen- 
tication tokens) with database entries for the user-ID 
and an associated authentication token (e.g. password, 
Secure-ID, biometric infomnation identifying the user, 
such as data on the iris structure of the user's eyes, data 
on the user's fingerprint, data on the user's voice char- 
acteristics for automadc speaker recognition etc.). 
[0010] In traditional telecommunications networks, 
the user database was often local to the NSS - such as 
in case of the NSS being a traditional TDM voice switch. 
In modern telecommunications networics, the user da- 
tabase is often kept centrally and is not local to the NSS. 
Therefore, user authentication involves communication 
to a remote database. This communication may bo gov- 
emed by standard protocols, such as most importantly 
the RADIUS protocol (Remote Access Dial In USCr 
Service) defined by the IETF (Internet Engineering Task 
Force). While the RADIUS protocol well defines the so- 
called process of AAA (Authentication, Authorization 
and Accounting) between a RADIUS client (the NSS) 
and a RADIUS server (the application having access to 
the user database), it does not provide any means to 
invoke a re-authorization with a new service profile dur- 
ing a session. Until very recently there was not even a 
way to disconnect by inifia-cive of the database, only 
very recently has a functionality been added for a RA- 
DIUS Disconnect Request, which allows to implement 
more flexible prepaid solutions. 
[0011] Particularly, when offering IP Sen/ices, an ex- 
ample of an NSS is the applicant's "Shasta 5000 BSN", 
("BSN" stands for Broadband Service Node), The BSN 
is designed to be-located at the "subscriber edge" of a 
service provider offering IP services, at the strategic 
point where the subscriber meets the IP network of the 
service provider. On the BSN, IP-Services can be pro- 
visioned and enforced on a per-subscriber basis. Also, 
service profiles can be defined for individual users or 
classes of users, which will be assigned to a user after 
successfull authentication during a so-called authoriza- 
tion. Prior to this invention, service profiles have always 
been static throughout a user session of authenticated 
users. There have boon applications for changing the 
service profile from an initial default profile in the context 
of cost effective DSL service deployment. This feature 
may b used to allow for self-provisioning in the context 
of Initial service stubscrip-tion of DSL customers (when 
they connect for the first time the DSL modem pur- 
chased in a retail store). This is achieved by the NSS's 



capability to enforce a s rvlce profile that drops all other 
traffic except HTTP traffic to a certain IP adress repre- 
senting the server for initial sign up of the so-far unau- 
thenticated users. Once the user has provided sufficient 

5 information that allows to authenticate him in that mo- 
ment (which will then be stored In a user database for 
future authentication purposes), the user will be author- 
ized for the first time with a user selected service profile. 
It it therefore important to note, that prior to this inven- 

10 tion, no service provider has ever re-authorized an au- 
thenticated user with a different service profile, particu- 
larly not in the IP Servces. 

[0012] For the services rendered during the session, 
the user will In most cases be billed on a time basis. This 

IS means that the amount of money with which the user 
will be charged for the session depends upon how long 
the session has lasted. However, the price may also de- 
pend upon other criteria, for example, on the volume of 
data that have been sent to the user during the session. 
In any case, there will be one or more types of service 
units (e.g. time or volume) which each have a certain 
price given in any suitable currency. In a postpaid sys- 
tem, the value of the service units consurned by the user 
will bo recorded on an account, and the user will bo billed 

25 later on the basis of this account. On the other hand, 
prepaid systems are known in which the user is credited 
in advance a certain amount of money which must be 
paid either in advance or later, and the account of the 
user will then be decremented In accordance with the 

30 value of the service units being consumed. When the 
user fails to reload his account and the account be- 
comes depleted, the user will be disconnected from the 
network. 

[001 3] It will be understood that the price that the user 
35 has to pay will depend upon the service profile to which 
the user has subscribed. The service profile is defined 
by a set of user service parameters which specify the 
so-called user service policy. This user service policy 
may encompass a variety of different aspects the most 
40 important of which are listed below: 

QoS policy: 

[0014] The policy governing the Quality of Service 
45 provided to the user, e.g. In terms of bandwidth provided 
or priority given to data from this user (for example re- 
garding the setting of precedence and drop priority in 
the TOS field (Type of Service) of IP packets to Imple- 
ment differentiated services according to DiffServ 
so standards or regarding a guaranteed bandwidth availa- 
ble to the user. 

Accounting policy: 

55 [0015] Th policy governing the way th accounting 
and billing is done, specifying among others the billed 
items (i.e. the service units, volume or time or oth r) on 
which billing Is based, the accuracy of the bill (for exam- 
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pie. whether time is billed in minutes or seconds), the 
payment mode, prepaid or postpaid, postpaid payment 
celling, the applicable tariff, bill presentation policy (for 
example In real time in the browser or only when the 
user accesses a special website; further, whether only 
the current tariff Is displayed or also the current state of 
the prepaid account or current accumulated amount of 
charges, e.g. for a monthly postpaid bill, recharging pol- 
icy (e.g. if recharging the prepaid account with credit 
card is possible), etc. 

Privacy/accountability policy: 

[0016] The policies goveming, on the one hand, the 
extent of data collected on the user's behavior and the 
amount of user Infonnation visible to communication 
partners of the user, and, on the other hand, the extent 
of data collected to allow the user to challenge the cor- 
r ctness of a bill. 

IP-Sevlces Policy: 

[001 7] The policy governing which I P services the us- 
er is allowed to use (for example: http for WWW, Voice 
over IP; FTP, Telnet, smtp, etc). 

Security policy: 

[0018] The policy governing the extent to which the 
user is protected by the service provider against security 
hazards, for example by network-based firewalls and 
the like or by encryption of user communication. 

Content policy: 

[0019] The policy governing which content and/or 
websites the user is allowed to access. 
[0020] Conventionally, these policies defined by the 
service profile are static at least throughout a session. 
Only in the exceptional case of so-called self-provision- 
ing systems, In which an unauthenticated user has the 
possibllityto subscribe online, a new subscriber is at first 
authorized to a restricted service profile which allows 
only to enter the necessary data for provisioning the 
service. Then, once the service profile has been speci- 
fied, this profile will be fixed for the session to start and 
for any future sessions of the same user 

SUMMARY OF THE INVENTION 

[0021] It is on object of the invention to provide a 
method of providing telecommunications services, 
which offers more flexibility In adapting service profiles 
to the demands of users, service providers and other 
participants in the network. 

[0022] According to the invention, this obj ct is 
achieved by a method in which th service profile Is dy- 
namically varied in the course of the session after the 



logon procedure. 

[0023] Thus, once a. user has been authenticated to 
a session, the user may easily switch to another service 
profile without having to leave the cunrent session and 
5 to start a new session. As a result, one and the same 
session may be segmented into a plurality of sub-ses- 
sions to which different service profiles apply. The ben- 
efit for the user may be illustrated by the following simple 
example: 

10 [0024] Imagine that the user has logged on to a rela- 
tively cheap or even cost-free service profile. In the 
course of the session using this profile, the user arrives 
at a website where a file with a very large data volume 
is offered for download. Since the current sen^lce profile 
provides only a poor Quality of Service, e.g. a limited 
bandwidth and a low priority for the data packets to be 
transmitted, the download procedure would be unrea- 
sonably time-consuming. Now, the user may simply en- 
ter a command lo upgrade the service profile to a more 
expensive profile which provides however a significantly 
higher QoS, so that the download procedure will be ac- 
celerated. After this, the user may choose to return to 
the cheaper mode in order to continue with "surfing" on 
the Intomot. 

[0025] On the other hand, it Is not only the user but 
also the service provider who may take the initiative to 
change the service profile. The service provider may 
use this feature among others for offering servk:es that 
can at least partly be financed by more efficient adver- 
tising. 

[0026] Today, advertising on the Internet appears 
mainly In the form of banners which occupy only a small 
fraction of the web pages visible on the screen. Howev- 
er, since the users tend to ignore the advertising ban- 
ners and will focus on the main contents of the web pag- 
es or will rapidly click-on to another page, this kind of 
advertising is significantly less efficient than for example 
advertising on Free-TV channels, where the regular pro- 
gram is interrupted by advertising spots, so that the 
viewer is forced to watch the advertising spots, and his 
attention is not distracted by other contents. The inven- 
tion provides a tool with which this advertising model can 
easily be Implemented on the Internet. To this end. an 
advertising break consisting of a predetermined se- 
quence of part-screen or full-screen advertisements 
and/or multimedia advertising spots Is defined as a spe- 
cific service profile governing the full advertising break, 
or a predetermined sequence of service profiles where 
the sequence can be dynamically adapted. 
[0027] When the user has worked with his previous 
or default service profile for a certain time, the Intemet 
Scrvico Provider forcibly switches to the service profile 
"advertising break", so that the user Is forced to watch 
the adv rtising before he can continue with his own 
service profile. The profile "advertising break" may also 
include interactive el ments permitting the user to sel ct 
advertising on a specific topic In which he is particularly 
interested. This is beneficial for the advertiser, because. 
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in this way, the potential clients can be targeted more 
precisely. In order to give an additional incentive for the 
user to deal with the advertising, the advertising break 
may also include games, prize-competitions and the 
tike. Moreover, the service profile may permit links to the 
web pages of the companies rn whose benefit the ad- 
vertising has been made, so that the user may directly 
respond to the advertising and may order the corre- 
sponding goods and services. 

[0028] It will be understood that the feature whether 
or not a service profile that has been selected by a user 
may be inten-upted by an advertising break is again a 
feature which distinguishes service profiles from one an- 
other. Thus, the user may select a service profile which . 
is relatively cheap but will be interrupted by advertising 
breaks from time to time, and when he becomes an- 
noyed by the advertising breaks, he may, within the 
same session, choose to switch to a more expensive 
profile in which advertising breaks are forbidden. 
[0029] In case of a profile billed on a tirne basis, the 
user niay find advertising breaks more acceptable when 
the advertising break is configured as a cost-free profile, 
and a corresponding message on the screen may ad- 
vise the user that he will not be billed for tho timo ho is 
watching the advertising spots. The user may even be 
rewarded for watching the advertisement by specifying 
in the service profile "advertising break" that the prepaid 
account of the user is not decremented, but, instead, is 
incremented for each minute or second he is watching 
the advertiserrient. Then, it may also be advantageous 
if the user has the option to switch to an "advertising 
break" profile voluntarily, in order to increase his ac- 
count. 

[0030] In ah existing network system, the method ac- 
cording to the invention may be implemented by install- 
ing, on behalf of the service provider, a piece of software 
which is called Session Manager Application (SMA) 
which ties together the authentication and authorization 
software, the user data base and the software control- 
ling the selection of p re-configured service profiles or 
the dynamic provisioning of service profiles in the Net- 
work Service Switches. When the change from one 
service profile to another can be initiated by the user^ 
the system will also include a "Content and Policy Se- 
lection Portar (PSP) for handling the user Instructions 
by which the service profile is changed. 
[0031 ] Alternaltvely, a "Business to Subscriber" Inter- 
face Software application (B2S) may be used to initiate 
a change from one service profile to anoter. Tie B29S 
interface may interface diretly to a user terminal with a 
physical control capability such as a button on a mobile 
handset that can be pushed to invoke a cangc to a spe- 
cific service profile, or multiple buttons associated wich 
specific service profiles. These buttons may be pr -con- 
figured by the manufacturer and the s rvic provider, or 
software configured according to the individual us rs 
preferences, Alematively. the B2S may interaface to a 
software running on a temnlnal device used by the user. 



8 

such as a browser on a PC, a micro browser on a mobile 
handheld device, a telephone set with a software con- 
trolled display etc. All these alternatives have in com- 
mon the the user can initiate a policy change via inter- 

5 facing to th B2S applk:ation or to the PSP, which in turn 
manipulate the user database in order to infomri the SMA 
of the requested change. These applications do not di- 
rectly interface to the SMA, rather solely via the user 
database. Changes to the databae affect the user 

10 record of the user requesting a service policy change. 
The B2S application and also the PSP application also 
add the username to a special concatenated list of user- 
names, which have requested a policy change. The 
SMA will check this list (or the application speific lists) 

75 regularly In very short Intervals to ensure that the policy 
changes requested by the users will be implemented in 
near real-time. 

[0032] Since the change fronn one service profile to 
another, be il inilialed by the user or by the service pro- 

20 vider, will in most cases have an impact on the account- 
ing policy (at least on the applicable tariff), the method 
according to the invention is preferably combined with 
afiexible and efficient accounting method. In a preferred 
embodiment, this accounting niethod is based on a pro- 

25 paid system In which a prepaid account of the user is 
decremented In accordance with the service units being 
consumed. In this respect, however, the term "prepaid 
system" does not necessarily mean that the amount to 
be paid for loading the prepaid account must actually be 

30 paid in advance. 

[0033] According to the invention, the records in the 
user data base will include a field "Prepaid Account Dec- 
rementor", which indicates, in any suitable accounting 
units, the amount by which the prepaid account will be 

35 decremented for each service unit, e.g. for each minute 
or second in which the session has continued. The cur- 
rently applicable tariff is therefore equal to the number 
of real-time accounting units that are decremented at 
the beginning of each accounting step Interval. When 

40 the service profile is changed, the accounting policy can 
easily be adapted by changing the entry In the "Prepaid 
Account Decrementor". It is even possible to change the 
entry in the Prepaid Account Decrementor, and hence 
the tariff, in each accounting step interval, depending on 

45 the contents that the user has been viewing or on the 
volume of data that have been transmitted to the user 
in the past interval. 

[0034] According to an optional but particularly useful 
feature of the invention, accounting is achieved by a way 

50 of transactions in which a certain amount of accounting 
units, which may be positive or negative, is transferred 
form one account to another. If, for example, the user is 
billed for session time on a per-minute basis, and the 
user may select betw en an expensive "first class" serv- 

55 ic profil in which advertising breaks are not permitted, 
and a cheaper "economy class" service profile in which 
advertising breaks are allowed, then the accounting 
method may Involve a number of accounts in addition 
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to the prepaid account of the us r. One of these ac- 
counts will be dedicated to the "first class" profile, an- 
other one to the "economy class" profile, and yet another 
account to each of the companies or pools of companies 
that have ordered the advertising spots. Then, when the 
user has selected the "first class" profile, a high decre- 
ment will be set in the "Prepaid Account Decrementor", 
and after each accounting period of one minute, a cor- 
responding amount will be transferred from the prepaid 
account to the "first class" account. When the user 
switches to the "economy class" profile, the entry In the 
"Prepaid Account Decrementor" will be decreased, and 
after each accounting period a corresponding smaller 
amount of accounting units will be transferred from the 
prepaid account to the "economy class" account. Thus, 
the various accounts will at any time indicate how much 
of the accumulated expenses of the user have been 
spent on the "first class" services and how much on the 
"second class" services. This more detailed information 
will be valuable not only for the user but also for the serv- 
ice provider Further, during an advertising break, the 
"Prepaid Account Decrementor" may, for example, be 
set to a negative value, which means that the user is 
paid for watching the advertising spots. Then, (positive) 
amounts of a counting units will be transferred from the 
advertising accounts to the prepaid account of the user. 
As a result, the user can see at any time how much he 
has "earned" by watching the advertising, and, con- 
versely, the advertising accounts may be used by the 
service provider for billing the companies who have or- 
dered the advertising spots. In addition, these compa- 
nies get valuable feedback information on the extent to 
which there advertising has been watched, and this in- 
fomnation may be accessed online at any time. 
[0035] Another useful application of the accounting 
method in conjunction with the dynamically varied serv- 
ice profiles is the support of sponsoring. If a person or 
company wants to sponsor user accesses in general or 
specific websites or contents that are offered on the In- 
ternet, a specific service profile will be created for this 
purpose. More specifically, the content policy defined by 
this service profile will limit the access to contents or 
websites which the sponsor wants to sponsor. Further, 
a sponsor account is provisioned as a prepaid account 
or postpaid account for which the sponsor will be billed. 
If the site is fully sponsored, then, after each accounting 
period, the decrement specified for this service will not 
be subtracted from the prepaid account of the user, but, 
instead, will be subtracted from the account of the spon- 
sor. If the site is sponsored only partly, then a reduced 
decrement will apply to the prepaid account of the user, 
and the rest of the decrement will be subtracted from 
the account of the sponsor. Optionally, a specific ac- 
count for the sponsored profile is provisioned for th us- 
er, and the amounts subtracted from the account of the 
sponsor are added to the account for the sponsored pro- 
file, so that the user may check at any tim how much 
he has obtained from the sponsor. 



[0036] As an alternative, sponsoring may be achieved 
by transferring a limited amount of accounting units from 
the account of the sponsor to the prepaid account or to 
a specific sponsored account of the user at the time 

5 when the user switches to the sponsored profile. Then, 
after each accounting period, the decrement is subtract- 
ed either from the prepaid account of from the spon- 
sored account, as long as the same is not depleted. 
[0037] Although the transaction-based accounting 

10 method described above is particularly useful in con- 
junction with dynamically varied service profiles, the 
field of application of the accounting method is not lim- 
ited to this. 

[0038] For example, the accounting method may also 
15 be used for safe and easy-to-han-dle payments, in B2B 
(Business to Business) or B2C (Business to Customer) 
e-buslness activities or even In P2P (Peer to Peer) 
transactions. This is particularly useful in conjunction 
with micropaymenls, i.e. with payments in which the 
amounts being paid are so small that the transaction 
costs of a normal payment mode such as a payment via 
credit card would be disproportionately high. If, for ex- 
ample, private users communicate with each other over 
the Internet by c-mail or within a chat room or within a 
news group, and one user wants to reward another user 
for having given a valuable information or having al- 
lowed him to download an interesting file, a payment 
equivalent to a small amount of money can be made by 
transferririg a corresponding amount of accounting 
units. On behalf of the person receiving the payment, 
these accounting units may be added to the prepaid ac- 
count. In a similar manner, payments may be made to- 
commercial Application Service Providers (ASP), to an 
inf onnation broker or the like. Thus, It would be possible 
for example for a commercial contents provider to pro- 
vide an online dictionary or encyclopedia and to claim a 
small fee for each catchword that is looked up in the dic- 
tionary. The fee will then be paid in accounting units. As 
a value-added service, the Intemet Service Provider 
may then act as a transaction mediator. The mediator 
bills the client user in legal currency for loading his per- 
sonal prepaid account. The payments to the contente 
provider will accumulate on an account of the ASP, and 
this account will be balanced from time to time by con- 
verting the accounting units into legal currency and by 
transferring a corresponding amount In legal currency 
from the mediator to the contents provider. In this case, 
the accounting units used in the network accounting 
system will not only serve for billing purposes of the In- 
ternet Service Provider but will also have the function of 
a virtual cun^ency for other business transactions. 
[0039] The realtime accounting method described 
does not only apply to prepaid, but also for direct post- 
paid accounting and billing. Depending on the account- 
ing mode, the SMA acts ither as prepaid system or as 
postpaid system. It should be understood that the solu- 
tions presented herein are not limited to prepaid, but are 
at the same time applicable to postpaid as well. When- 
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ever this docurnert discusses prepaid, an equivalent 
postpaid solution can be devived as follows: When the 
prepaid system decrements (the tariff), a postpaid sys- 
tem will increment. When a prepaid system checks for 
account depletion, a postpaid system does not need to 5 
to that, however it will check if an optional payment ceil- 
ing has been reached. Once per month orper quarter a 
bill will be produced. 

[0040] The accounting method according to the in- 
vention may also be used for statistical purposes in a io 
broad sense. In this context, the accounts of an individ- 
ual user may not only be linked to different service pro- 
files but may also be linked to different categories of 
services and/or contents within the same profile. For ex- 
ample, there may be one or more accounts for different 
types of advertisements that the user has watched, an 
account for online purchases of the user, for which the 
Internet Service Provider gets a commission or which 
are profitable for the ISP in any other way, and the like, 
this will among others allow the Internet Service Pro- so 
vider to pemnanently rate the users as to their profitabil- 
ity. This may be attractive also in a flat rate scenario, In 
which the user is not billed per service units but pays a 
fixed monthly amount for having access to the network. 
In conjunction with dynamically changing service pro- 25 
files, this rating information may be used for automati- 
cally switching profitable users to a more extended serv- 
ice profile or, conversely, for restricting the service pro- 
file of less profitable users. This rating procedure and 
its consequences may either be visible or invisible for 30 
the user. 

[0041 ] Such statistical information may also be bene- 
ficial for the user, since It may be utilized, for example, 
for establishing an automatic fraud detection system, e. 
g. by implementing customer-visible or invisible pay- 35 
ment ceilings or by monitoring for abnormal user behav- 
iors which could hint to fraudulent usage. 
[0042] The balance between privacy and abcountabil- 
ity, i.e. the extent to which the behavior of the user can 
be tracked, will depend on the selection of user-specific 40 
and global accounts. User-specific accounts will allow 
to track the behavior of individual users with a resolution 
that depends on the definition of service categories and/ 
or content categories represented by the different ac- 
counts. On the other hand, global accounts will only re- ^5 
fleet the collective behavior of the users, without any 
possibility to Identify the users who have used the cor- 
r spondrng services. 

[0043] The functionality that is enabled by the ac- 
counting method according to the invention leads to a so 
variety of features which may again be used for speci- 
fying different scn/icc profiles. Forcxampic, the service 
profiles may be distinguished In tenns of the policies de- 
scribed below: 

55 

Advertising policy: 

[0044] A policy which governs the way in which the 



user is exposed to (and forced to view) advertising, in- 
cluding for example the rate and length of advertising 
breaks interrupting the user's nonmal usage and forcing 
him to view the advertising, the kind of advertising, and 
whether or not targeted advertising is applicable to this 
user. 

Rating policy: 

[0045] The policy governing the way a customer is rat- 
ed for profitability to the service provider or for other cri- 
teria specified by the service provider. For example, if 
the rating is partly visible to the user via customer loyalty 
bonus points, the policy may also govern how to react 
to the rating of the user, e.g. by upgrading a profitable 
user to a better quality of service or downgrading a less 
profitable user to lower quality of service or a different 
advertising policy - of course always within the bound- 
aries of the service contract. 

Fraud detection policy: 

[0046] The policy governing invisible payment ceil- 
ings, classification of users according to normal usage 
patterns, user notification policy, etc. 
[0047] Since the accounting method described above 
is not limited to the case that the service profile is varied 
dynamically, another aspect of the present invention re- 
lates to an accounting method for telecommunications 
services, wherein users consume telecommunications 
sen/ices in predefined service units having each a spe- 
cific value that Is express in accounting units; and each 
user has at least one account that is incremented or dec- 
remented essentially in real-time in accordance with the 
service units being consumed, comprising transactions 
in which a positive or negative amount of accounting 
units is transferred from an account of a user to another 
account. 

[0048] In this context, the expression "essentially in 
real-time" means, that the accounting information is pro- 
vided accurate and timely enough to be perceived by 
the service provider and/or the users or other partici- 
pants to the network in real-time, when considering in- 
evitable response times in the networi< based systems. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0049] Preferred embodiments of the invention will 
now be described in conjunction with the drawings, 
wherein: 

Fig. 1 is a block diagram of a Multifunctional Prepaid 
System illustrating the principles of the inven- 
tion; 

Fig. 2 is a diagram of a Personal Prepaid Record 
(PPR); 
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Fig. 3 is a flow chart illustrating the basic steps of the 
method according to the invention; 

Fig. 4 is a flow chart of an accounting routine; and 

Fig. 5 is a simplified illustration of a user screen. 

DESCRIPTION OF PREFERRED EMBODIMENTS 

[0050] Described is a Multifunctional Prepaid System 
Illustrating the principles of the invention. This system 
is particularly useful for the real-time-accounting of B2B 
and B2C e-Business activities and of network access 
costs (over wireline and wireless networks) Including 
privacy protection capability with multiple privacy modes 
and the capability for payment ceiling, sponsor-financ- 
ing and advertising financing with the possibility for the 
interruption of unrestricted usage via advertising blocks 
wilh reslricled allernale usage, as well as with the pos- 
sibility for the fine-tuning of advertising campaigns in re- 
al-time according to regional or other anonymlsed cus- 
tomer data, as well as with the possibility for the user to 
change his usage profile within a usage session multiple 
times, including the applicable tariff and the applicable 
security policy and the applicable privacy policy, and al- 
so the possibility forthe userto monitor the current serv- 
ice policy and the status of his related accounts in real- 
time. 

[0051 ] The Multifunctional Prepaid System - In the fol- 
lowing abbreviated as MPS ^ is a total system consisting 
of multiple hardware and software elements, which work 
together in a special way to deliver an extensive set of 
features as outlined above. 

[0052] Fig. 1 shows the core elements of the Multi- 
functional Prepaid System as well as some comple- 
menting elements. 

[0053] A Multifunctional Prepaid Logic 10 (abbreviat- 
ed as MPL) comprises a database called Personal User 
Database 12 (abbreviated as PUD) and at least one ap- 
pibation called Session Manager Application 14 (abbre- 
viated as SMA) as well as at least one RADIUS server 
apptication 16 for authentication purposes. The MPL 10 
implements the complete services logic describing the 
Intemet users (subscribers) and other participants of the 
Multifunctional Prepaid System such as sponsors and ^5 
advertisers. The Multifunctional Prepaid Logic is de- 
scribed in the database structure in conjunction with the 
execution principles of the Session Manager Application 
14. 

[0054] A user 1 8 accesses the MPL 1 0 via a Network ' so 
Service Switch 20 (NSS). The NSS is controlled by the 
MPL 10 and dctennlncs the contents to which the user 
1 8 has access. These contents may Include the totality 
or a restricted selection of contents 22 that are acces- 
sible overthe Internet, including contents host d by con- 55 
tent providers, Application Service Providers (ASP), 
streaming providers, and the like. A specific class of 
contents 24 has been shown separately. These con- 



tents 24 are sponsored by a sponsor, so that they can 
be watched at reduced costs or cost-free. 
[0055] Another class of contents 26 consists of adver- 
tising spots that have been compiled by the service pro- 
vider for the purpose of at least partly financing the serv- 
ices by advertising. 

[0056] The service provider has further provided a 
number of special websites 28, 30 and 32, including a 
start period website 28 to which the user Is forcibly di- 
rected when he logs on to the network. Another website 
30 called "Content and Policy Selection Portal" (PSP) 
can be visited by the user at any time during the session 
and permits the user to change his service profile within 
the session. 

[0057] If the prepaid account of the user is depleted, 
he Is forcibly directed to a "period of grace website" 32 
which advises the user that he has to reload his account 
or othenwlse will be disconnected from the network. 
[0058] the Multiruncllonal Prepaid Logic 10 is also 
accessible through a number of Interfaces 34, such as 
B2B Interfaces, B2C interfaces and P2P Interfaces that 
will be used for various kinds of business transactions. 
[0059] In the Personal User Database 12, each user 
has a Personal Prepaid Record (PPR) 36 the structure 
of which is shown In Fig. 2. 

The PPR 36 contains various fields such as the following 
very essential fields: 

[0060] User-ID 28, Password 40, Personal Prepaid 
Account (PPA) 42, Prepaid Account Decrementor (PAD) 
44, a Depletion Policy field 46, a Pointer to Depletion 
Policy Parameters 47, and a Pointer to Counter Account 
48. 

[0061] The User-ID identifies the user, the Password 
is used to authenticate the user, the Personal Prepaid 
Account contains the current value in acccounting units 
of the Prepaid Account - basically representing a value 
to the userthat he has acquired by prepaying or by other 
means. The Prepaid Account Decrementor represents 
the currently applicable tariff, as it describes the number 
of acccounting units spent per accounting interval (com- 
parable to a spending speed). The amount by which the 
Personal Prepaid Account is decremented Is transfen'ed 
to a counter account 50 which is not necessarily Includ- 
ed in PPR. There may be a large variety of accounts 
which serve as counter account for a specific transfer 
action, depending on the actual service profile or on the 
type of transaction. This is why the PPR includes the 
field Pointer to Counter Account which specifies the ap- 
plicable counter account Depending on the privacy 
mode selected, the counter account may be a personal 
account Included In the PPR of the same user or a global 
account owned by the Internet Service Provider or an- 
other participant, e. g. an advertiser, a sponsor or the 
like. In case of P2P transactions, the counter account 
may also be a Personal Prepaid Account or another ac- 
count of another user. 
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[0062] The Depletion Policy field 46 and the Pointer 

to Depletion Policy Parameters 47 specify which action 
has to be taken when the Personal Prepaid Account be- 
comes depleted. 

[0063] The PPR further includes a Personal Control 
Field 52 and a Dynamic Control Field 54 the functions 
of which will be explained later. 

[0064] Depending on the operating mode or sen/ice 
profile selected, the PPR may be in plain format or in 
extended format. The plain format includes the fields de- 
scribed above as well a Pointer to Extension 56, a Point- 
erto Advertising Control 58, and otherfields 60 that may 
be used for other purposes. 

[0065] Further, the plain fonnat includes several ad- 
vertising control blocks one of which Is shown in Fig. 2. 
An Advertising Block Duration Account 62 Is decrement- 
ed by an amount specified In an Advertising Block Du- 
ration Decrementor 64 at the start of each accounting 
interval in which the user was restricted to watching a 
specific advertising block that is linked to the acccount 
field 62 and to a corresponding global counter account 
of the advertiser. A Depletion Policy field 66 specifies 
the action to be taken when the Advertising Block Du- 
ration Account becomes depleted, c. g. return to the de- 
fault profile of the user. Additional fields 68 wilt control 
the duration of each Individual advertising spot within 
the advertising block in an analogous manner. 
[0066] The depletion policy specified in the field 46 or 
66 may imply that access of the user is restricted to cer- 
tain IP adresses. In this case the service profile to be 
employed is not necessarily fully pre-defined in the NSS. 
Instead, the PPR iccludes the fields "Pointer to Deple- 
tion Policy Parameter" 47, 68 which are associated with 
the Depletion Policy field and point to parameters such 
as an IP adress which the SMA must hand-over to the 
NSS when instructing the NSS with a new policy. This 
method can also be used for exclusive premium content. 
[0067] The plain fonriat is sufficient when the user is 
using a privacy mode that does not need accountability 
and when the advertising mode does not need to track 
which advertising the user viewed. It is expected that 
the vast majority of users will mostly be using modes 
that are associated with the plain format (it is expected 
that services associated with the plain format are cheap- 
er than services with extended format). 
[0068] The Pointer to Extension 56 points to an ex- 
tension which represents the extended format and, In 
the example shown, includes fields 70 to 80. 
[0069] When the user 1 8 accesses the service, he will 
logically connect to the Network Service Switch 20 
(NSS). The NSS constitutes the "subscriber edge" 
where the subscriber (customer) communication is an- 
chored, regardless whrch access method the customer 
uses. Th NSS 20 will via the RADIUS protocol commu- 
nicate with the RADIUS server 16 to authenticate the 
user. The RADIUS server 16 looks up the us r r cord 
(the PPR - Personal Prepaid Record) in the Personal 
User Database 1 2, and if it finds the user and if the pass- 



16 

word or another authentication method employed 
matches, the RADIUS server will send a positive au- 
thentication to the NSS 20. The RADIUS server will 
modify the PPR in the database to indicate that it is cur- 
5 rently an active user and will add the user-ID to a 
change-request list in the database 12. The SMA 14 will 
interrupt regularty (e. g. after manipulating a number of 
user account in if s local cache) to look up in the data- 
base, if a change has been requested. It will retrieve the 
10 PPR and stor a copy of the PPR into it's local cache. 
The cache holds all active users. The copy of the PPR 
stays in the faster memory (the cache) until the user dis- 
connects. When the user disconnects, the RADIUS 
server 1 6 is Informed of that fact via a RADIUS account- 
ing stop message and will indicate In the PPR that the 
user Is no longer active and will inform the SMA 14, 
again via the database, to remove the PPR of that user 
from the active user cache. 

[0070] The Network Servrce Switch 20 (NSS), whrch 
is controlled by the MPL 10, allows to change the user 
profile (effectively re-authorizing the same user) multi- 
ple times during a session. This effectively splits a user 
session into multiple part-sessions with a re-authoriza- 
tion of the same user taking place at the start of each 
part session - applying a separate user profile and a sep- 
arate tariff and potentially also accounting mode to each 
part session. 

[0071 ] The basic steps of the method of providing In- 
temet access and, especially, of changing the service 
profile, are illustrated in Fig. 3, which gives a high-level 
view of the functions performed by the MPL 10 as a 
whole. A session starts when the NSS signals, e. g. via 
a RADIUS Accounting Start Request, that service deliv- 
ery using the Initial authorisation has in fact started. In 
step SOsave, the RADIUS Server 1 6 will update the PPR 
to mark It as active user and will also request the SMA 
via the database to add the PPR to it's local cache. In 
step S1 , it is checked whether there is a request to 
change the service profile. This request may be entered 
by the user or may be the result of an event that is de- 
tected in the accounting procedure such as the event 
that the prepaid account of the user is depleted. The 
step SI is repeated cyclically, until a request for a new 
service profile occurs. Then, the personal prepaid 
record PPR is updated in step S2, and the Networi< 
Service Switch 20 is instructed in step S3 to reconfigure 
the service profile for the user. Then, it is checked in 
step S4 whether the session is terminated, if this is not 
the case, the routine loops back to step 31 , and the se- 
quence of steps described above is repeated until the 
user logs off or is forcibly disconnected from the net- 
work. When it has been detected in step S4 that the ses- 
sion is temiinated, e. g. on receipt of a RADIUS Account- 
ing Stop m ssage by the RADIUS S rver 16, the PPR 
55 of the us r is deleted from th cache, and the us r will 
no longer b treat d as an active user. 
[0072] The SMA 14 is an application which Is started 
automatically by the system in certain intervals (called 
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acx:ounting step) nnd manipulates the data records in 
the Personal User Database (PUD) 1 2 in every account- 
ing step by transferring accounting units from one ac- 
count to one or multiple olher accounts, whereby strictly 
.ensuring that the sum of all acccounting units In the 5 
overall MPS does not change within an accounting step. 
An MPS-unit can be money in any currency or scaled 
money such a 1/10 Cent. Alternatively, an MPS-unit can 
also be time in seconds or minutes or any other time 
unit. Alternatively, an MPS unit can be bonus points of io 
a customer loyalty system similar to the "aimnites" re- 
warding system used by air carriers, or other rewards 
provided by companies to their customers as a custom- 
er binding incentive. Alternatively, acccounting units can 
be newly created units that do not yet exist today, such is 
as "prepaid miles" where a prepaid mile has a fixed price 
at a certain time (the purchase time), which may how- 
ever vary over time, or sponsor "miles'* or advertising 
"miles" representing a special unit for accounting with 
advertisers and sponsors. Alternatively, an IVIPS unit 20 
can also be privacy-miles which allow to access the In- 
ternet with differentiated privacy levels and change the 
privacy level multiple times within a user session, 
whereby the user selects the appropriate privacy level 
for the respective Intemet activity. 2s 
[0073] In general, there is a conflict between the de- 
sire of the user for privacy - and the desire of the user 
for accountability. Accountability allows the user to 
make his service provider accountable for the sen^ice 
provided, e.g. via refusing to pay for an Item in a bill that 30 
the user claims to have not purchased or perhaps only 
received with degraded quality. Accountability means 
for the service provider that he needs the ability to roll- 
back or compensate for e-commerce transactions 
where the user is not satisfied with the service provided 35 
or goods delivered. The user may demand the transac- 
tion to be rolled back (e.g. return the good based on laws 
for consumer protection) and therefore the service pro- 
vider has to keep data on the user<behavlor In order to 
be able to rollback the e-commerce transaction or at 40 
least verify if the user complaint is substantiated. As a 
result the service provider would have to collect data on 
the user behaviorsuch as his e-commerce transactions, 
content consumed, etc. Collection of this data is how- 
ever In conflict with the user's desire for privacy. The 45 
MPS solves this problem by providing the user the 
choice al alt times which privacy level he wants to be 
applied for the current Internet activity. If he wants to 
nf orce privacy in that way that the service provider shall 
not track the user behavior for the next part session, he so 
at the same time has to agree to give away his right to 
complain if the quality of the service was not satisfactory. 
[0074] Six privacy levels are implemented in the 
MPS: 

55 

Basic Accountability (e.g.: Sen/Ice Provider tracks 
the flow of acccounting units for rollback capability) 



Advanc d Accountability (e.g. in addition: Service 
Provider performs IP billing on packets on a volume 
basis) This is achieved by the SMA 14 dynamically 
changing the decrementor field prior to decremen- 
tation on th basis of the number of packets counted 
by the NSS 20 In In up to 64 buckets according to 
the value of the TOS field in the IP-packet. 

Premium Accountability (e.g. Service Provider acts 
as mediator for e-commerce transactions) 

Basic Privacy (e.g.: Service Provider does not know 
to which account acccounting units have been 
transferred - no tracking, no rollback capability, no 
technical way to tell which content or which adver- 
tising the user viewed) 

Advanced Privacy (like basic privacy but plus e.g. 
basic anonymity for e-mail, cooky filtering) 

Premium Privacy (e.g.: advanced anonymity of the 
user is being granted by alias Interfaces) 

[0075] Related to the privacy, mode arc advertising 
modes. Advertising modes may or may not be user-se- 
lectable (alternatively they may b© hard linked with a 
certain service). There are several advertising modes 
(combinations are possible if they are not contradictory), 
for example: 

No advertising (premium rate) 

Anonymous advertising 

Advertising at session start 

Advertising at session end 

Advertising at policy change 

Advertising at time interval 

Advertising in cooperation with Client 

Advertising Client triggered 

Advertising embedded in Client 

Full Screen interstitial advertising 

Exclusive Advertising (barring all other uses) 

Non-exclusive Advertising (user can do other activ- 
ities in parallel) 

Targ ted advertising 

Target Plus: Targeted advertising with tracking 
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which advertising the user viewed 

Event and context driven advertising 

[0076] Fig. 4 sunrimarizes the basic steps of the ac- 5 
counting procedure. In step S1 1 , it is checked whether 
the accounting step interval has elapsed. This step is 
repeated, until the inten/al has actually elapsed. Then, 
the accounting for all active users is done in step S12. 
To this end, the current service profile of the user is de- 
temnined, and it is decided which accounts may or must 
be changed pursuant to this service profile and which 
counter accounts are linked to these accounts. Then, 
each account that has been detemnined in this way is 
changed by subtracting the decrement that has been 
specified for this account. For example, If the account is 
the Personal Prepaid Account 42 shown In Fig. 2, then 
the corresponding decrement is indicated by the Pre- 
paid Account Decremenlor 44. The same decrement Is 
then added to the counter account 48 associated with 
the present account. In an accountability mode, the 
counter account for the Personal Prepaid Account may 
be a personal receiving account included in the exten- 
sion fields 70, 72 of the PPR. Similarly, the accounting 
step may include the transfer of a number of acccount- 
ing units specified In the field 78 ("Decrementor X") from 
the field 74 ("Account X") to the field 76 ("Counter Ac- 
count X"). Likewise, accounting units subtracted as dec- 
rement from the Advertising Block Duration Account 
may be added to the corresponding couter account 
which enables the advertiser to monitor in real-time how 
much time the users have collectively spent on watching 
this advertising block. 

[0077] In step 812, It is also checked for each active 
user and for each account whether the account has be- 
come depleted. If this is the case, the SMA will intruct 
the NSS to select the service policy defined by the vau- 
lue in the field Depletion Policy and optionally by addi- 
tional parameters defined by a list of chained parame- 
ters anchored by the Pointer to Depletion Policy Param- 
eter. Subsequent to step SI 2, the routine returns to the 
start position and will be re-executed when the next ac- 
counting step interval has elapsed. 
[0078] An essential feature of the MPL is the fact that 
it works according to the principles of accounting where 
the sum of all accounts remains constant in an account- 
ing slep. It is of course possible to fill or otherwise ma- 
nipulate accounts via an extemal interface - however the 
SMA 1 4 will not change one accou nt without transferring 
the balance to another account in the system, thus keep- 
ing the balance of all accounts in the database constant. 
This implies that there is a global account "Service Pro- 
vider Earned Net Revenue" (represented by the Counter 
Account 48 in Fig. 2), which may be split further into su- 
baccounts. In this account th Servic Provider can 
check how much of th acccounting units (e.g. prepaid 
money) has actually been spent by the users, reduced 
by the amount that other parties (e.g. content providers) 



have received In their global accounts. 
[0079] In the accountability mode and in Target Plus 
advertising mode the SMA 14 transfers acccounting 
units only within the PPR. Therefore, the PPR in extend- 
ed mode contains receiving accounts (such as in fields 
70, 72) where the prepaid acccounting units will be 
transferred to in each accounting step, and also donat- 
ing accounts such as sponsor accounts where (nega- 
tive) MPS units get added (thus subtracted) when a 
sponsoring takes place or an advertising is viewed that 
is sponsored. This can be used to Implement a personal 
maximum sponsoring threshold on a per customer basis 
and also on a per sponsor basis and also to limit the 
maximum time a single user can view a certain adver- 
tising (and get acccounting units for it). It can also be 
used to target advertising taking into consideration 
which advertising the individual user has previously 
seen. 

[0080] If not using the extended mode it is normal that 
the SMA transfers acccounting units between a PPR 
and one or multiple global accounts during an account- 
ing step. In this case, it is not possible to track for each 
individual sponsor or adver-tiser - which user has been 
transferred the acccounting units (who did benefit from 
sponsoring, and who did see a particular advertising or 
a particular exclusive content). This can be used to en- 
sure privacy protection. The MPL and each PPR can be 
run in mixed mode where some accounts are treated in 
fully personali7ed mode whereas other accounts are 
treated in global mode. 

[0081] In the variant "Global-Mode" the sum of ail so- 
called global accounts and of all active PPRs is always 
balanced (zero) after each completed accounting step. 
Accounting steps are executed by the Session Manager 
Application 1 4 (SMA) regularly In certain intervals called 
Accounting Step Interval, Each PPR may optionally con- 
tain a field "Accounting Step Interval" containing a value 
that defines the applicable accounting step interval as 
a multiple of a system-wide variablecalled "Smallest Ac- 
counting Step Interval". This variable is configurable as 
a constant value determining a time interval with system 
wide significance. If the smallest accounting step inter- 
val is one second, then a value of 60 in the "Accounting. 
Step Interval" field of the PPR means that accounting 
for this customer is done on a per minute basis. Each 
PPR contains at least the Personal Prepaid Account 42 
as well as the Prepaid Account Decrementor 44, in 
which the current speed of spending acccounting units 
is kept. For simplicity, if the "Accounting Step Interval" 
field is not present in the PPR, then a default value of 
one second applies. In addition, the database contains 
an account "Service Provider Revenues", to which the 
acccounting units are transferred when they are decre- 
ment d in the individual personal prepaid accounts - al- 
ternatively multipl accounts may b used to split th 
revenue across multiple accounts according to the cost 
structure of the service provid r or according to other 
criteria that can be flexibly configured by the service pro- 
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vid r. 

[0082] The PPR contains the two control fields men- 
tioned above, I.e. the Personal Control Field 52 and the 
Dynamic Control Field 54. These control fields (includ- 
ing optional extensions) determine how the SMA 14 
handles the PPR 36 in each accounting step. The Per- 
sonal Control Field is static and cannot be changed by 
the SMA, the Dynamic Control Field is dynamic and can 
be changed by the SMA. The Personal Control Field 
contains preconfigured controls, whereas the Dynamic 
Control Field controls the dynamic behavior within a us- 
er session. 

Personal Control Field: 

[0083] Bit 1 : If set to 0 it operates in global prepaid 
mode, If set to 0 It operates In personal prepaid mode. 
In personal mode, the SMA is only allowed to transfer 
acccounling units from the prepaid account in the PPR 
to one or more other accounts in the same PPR within 
an accounting step. 

[0084] Bit 2: If set to 0 it means simple accounts (all 
accounts are in the same M PS-unit, no account restric- 
tions apply. If set to 1, there is an additional database 
field for each account that is called account control field. 
It may be a separate field or it may be a number of bits 
from the decrementor field reducing the value range of 
the decrementor field. If present, the account control 
field determines in which acccounting units the account 
be run. When operating in mixed MPS-unit mode, the 
SMA uses a conversion table to convert fronri one M PS- 
unit into another in each accounting step where neces- 
sary. This conversion table (including the applicable 
conversion rates) may be dynamic and may be changed 
via an external B2B interface (one of the interfaces 34 
in Fig. 1 ). The account control field may also determine 
limitations to the account, e.g. whether an account and 
an associated decrementor field can never be de- 
creased or whether It can never increased e.g. by an 
external interface. 

[0085] Bit 3: If set to 0: Advanced mode (to each ac- 
count there is a variable decrementor field). If set to 1 : 
Sirriplistic mode, i.e. decrementor fields are not present, 
all decrementors are 1 unit and cannot be changed, i.e. 
in each accounting step the SMA subtracts the value of 
1 from the respective accounts. 

Bit 4: reserved 

[0086] Bit 5: If set to 0, a session starts with the default 
mode, if set to 1 , the session starts with a special start- 
period (website 28). 

[0087] Bit 6: If set to 0, a "period of grace" does not 
apply, If set to 1 a period of grace applies after the pre- 
paid account has b en deplet d. 
[0088] Bit 7: If set to 0, global advertising mode ap- 
plies, if set to 1 , personal advertising mode appli s. 
[0089] Bit 8: If set to O: The decrementor field is not 



volume based, only time based. If set to 1 : A Prepaid 
Volume Based Decrementor applies, which means that 
the SMA has to reset the Prepaid Volume Based Dec- 
rementor (PVD) to 0 at the end of the accounting step 
5 and transfer the volume units to a total volume account. 
This assumes that the network element sends volume 
units less frequently then the accounting steps are oc- 
curring. A volume based interface enables the NSS 20 
to measure traffic volume parameters and set the Pre- 
10 paid Volume Based Decrementor accordingly. The PVD 
Is zero when no traffic volumes are measured, (thus a 
subtraction of zero does not change the prepaid ac- 
count). After the PVD has been subtracted from the pre- 
paid account, the PVD is set to zero, in which way It Is 
15 ensured that a used volume is only accounted for once. 
[0090] Bit 9: If set to 0, the system operates in global 
sponsor mode, If set to 1 it operates in personal sponsor 
mode. 

[0091] Bit 10: If set to 0 the system operates in global 
20 content mode, if set to 1 it operates in personal content 
mode. 

[0092] Bit 11 : If set to 0, shared advertising does not 
apply to this user, if set to 1 it applies. 
[0093] Bit 12: If set to 0, exclusive advertising does 
25 not apply to this user, if set to 1 It does apply. 
[0094] Bit 13 Reserved 
[0095] Bit 14 Reserved 
[0096] Bit 15 Reserved 

[0097] Bit 1 6 If set to 0, an extension Personal Control 
30 Field is not present, if set to 1 such a field Is present. 

Dynamic Control Field: 

[0098] Bit 1 : Mode change Indication 

35 [0099] Bit 2: reserved 

[0100] Bit 3: If set to 0, the PPR is currently in default 
mode, if set to 1 , it is in non-de-fault mode 
[0101] Bit 4: If set to 0 the PPR is currently in non- 
advertising mode (I.e. the user is currently not Interrupt- 

40 ed by an advertising break), if set to 1 the PPR is in ad- 
vertising mode, i.e. the user is being Interrupted by an 
advertising break 

[0102] Bit 5: If set to 0 the user is currently not in a 
start mode, if set to 1 , he is in the start mode. 

45 [0103] Bit 6: If set to O, the user Is cun-ently not in a 
"period of grace", If set to 1 the user Is currently In the 
period of grace (he sees only website 32). 
[0104] Bit 7: If set to 0 the user is currently not in ad- 
vertising mode, if set to 1 he Is in advertising mode. 

50 [0105] Bit 8. Reserved 

[0106] Bit 9: If set to 0 it operates in global sponsor 
mode, if set to 1 it operates in personal sponsor mode. 
[0107] Bit 10: If set to 0 it operates in global content 
mode, If set to 1 It operates in personal cont nt mode. 

55 [0108] Bit 11 : If set to 0, the PPR is currently not in a 
Premium Mode (e.g. acc ssing premium content), if set 
to 1 , it is currently in premium mode and therefore an 
account that limits (he maximum premium time has to 
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' be decremented. 

[0109] Bit 12: If set to 0, the PPR is currently not in a 
sponsor mode, if set to 1 it is currently in sponsor mode. 
This can be used to limit the duration of a sponsor mode 
part-session. 

[0110] Bit 13: Reserved 
[0111] Bit 14: Reserved 
[0112] Bit 15: Reserved 

[0113] Bit16: If set to 0, an extension Dynamic Control 
Field is not present, If set to 1 an extension Dynamic 
Control Field is present. 

[0114] All accounts of a PPR including the respective 
decrementor fields can be chosen to be in one of the 
following acccounting units: local currency of the user, 
another currency, bonus points of a customer loyalty 
program, bonus points that can be purchased or other- 
wise acquired e.g. via e-commerce activities or by view- 
ing advertising, existing loyalty program units such as 
airmiles, rewards, etc., new bonus programs, advertis- 
ing "miles" that specify a unit for flexible accounting with 
advertisers (broadcasting an advertising spot in a prime 
time may cost more advertising miles per second than 
during another time of the day, customer invisible units 
such as profitability miles that arc hidden to the custom- 
r but have influence to the quality of service that the 
customer receives within the boundaries of his contract, 
invisible accounting miles that are used to produce a bill 
for customers that are not prepaid, but postpaid, micro- 
payment units from any micropayment system on the 
market or new micropayment system units, vague value 
miles, where the exact value of the mile may differ on 
the time of day or other criteria not transparent to the 
user or owner of the mile. In the case when the MPL 
works with multiple acccounting units In parallel or in 
mixed mode between prepaid-Miles and currencies, 
each account will also have a field indicating the cunren- 
cy applicable for this account. The system may also con- 
tain a systemwide configurable conversion table to con- 
vert between different fomns of acccounting units. This 
conversion table can be manipulated via additional pa- 
rameters and interfaces to other systems such as by the 
B2B interface 34 to allow that the table calculation may 
be non-linear and the conversion result may differ de- 
pending on time of day, or other factors such as a real- 
time course determined at a B2B-exchange for ac- 
> ccounting units at a market comparable to the stock 

market NASDAQ but which is trading 24 hours around 
the clock. 

[0115] At each accounting step the MPL subtracts 
from all PPRs of active users the actual value of all pre- 
paid decrementor fields from their associated prepaid 
accounts and transfers the same value to another ac- 
count in the system (in personal mode this account is 
also part of the same PPR. in the global variant this ac- 
count may alternatively be a systemwide account). 
[0116] In addition to the customer prepaid account 
ther mayb additional accounts in the PPR and syst m 
wide in the MPS, which work according to the same prin- 



ciple as the customer prepaid account. This means they 
have an associated decrementor field - so-called unre- 
stricted decrementor fields, where the decrement value 
is allowed to become a negative value, which leads to 

5 an increase in the associated account during the sub- 
traction done in the accounting step (and an associated 
decrease in the counter-account which could be a spon- 
sor account). Some accounts may be classified as re- 
stricted accounts. In this case the MPL ensures auto- 

^0 matically that the account value can only change In one 
direction i.e. either always increases during an account- 
ing step (or remains at the same value) or decreases 
during an accounting step (or remains at the same val- 
ue). A sponsor account is usually an account which will 

IS only decrease during an accounting step (while it leads 
to an increase in the accounts that benefit from the spon- 
sor). 

[0117] The PPR may also contain accounts that are 
used for the control of adverllsing breaks. The user nor- 

20 mally has a default profile which Is applied at the begin- 
ning of the session. The default profile may be preceded 
by a profile that forces the user to a certain homepage 
at the.start. This could be the "Content and Policy Se- 
lection Portal" 30, or it could bo the Start Period Website 

25 28 directing the user to the website of a sponsor or to 
an initial advertising spot. After the optional start period 
(which Is controlled by a start period account with asso- 
ciated decrement) the user is assigned into his default 
profile. If the user service includes interruption by ad- 

30 vertising breaks, then there is an account present that 
controls the time till the part-session with the default pro- 
file ends and is followed by an advertising break. This 
account is called Default Profile Account and together 
with it's associated decrementor field it is used to control 

35 the time between advertising breaks during which the 
user is assigned his default profile. The default profile 
could for example allow him to surf freely in the Internet. 
Alternatively, the default profile may limit the user to a 
very basic service such as access only to websites via 

40 http. In this case, unrestricted Internet access may be 
offered as a premium service. The service provider is 
free to define the default profile according to the market 
requirements. When the Default Profile Account is de- 
pleted, the Session Manager Application 14 changes 

45 the profile of the user to the profile of the first advertising 
spot in the advertising block and transfers the PPR into 
advertising mode. The switchover lo the advertising 
mode Is perfomned automatically by the Session Man- 
ager Application. The duration of the advertising block 

50 Is detenmlned by the account "Advertising Block Dura- 
tion" and it's associated decrementor field . The duration 
of the advertising block may thus bo measured in cither 
time (default: seconds), or acccounting units including 
specially created advertising miles. Th counter ac- 

55 count in the personal variant is a PPR account In which . 
the amount of consumed advertising per customer Is 
measured in either time or acccounting units (e.g. ad- 
vertising miles). The counter account in the global vari- 
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ant is an equivalent global account for all activ custom- 
ers or all customers In the system. 
[0118] Within the advertising block it is possible to 
schedule different advertising spots in a certain se- 
quence, where the duration of the current advertising 
spot is controlled by an "Advertising Spot Account" and 
if s associated decrementor, if the default of one second 
decrement and 1 second accounting step during adver- 
tising breaks is not used. The decrement may be in time 
or acccounting units. Advertising miles are an option for 
the accounting unit, which can be used for factoring and 
accounting with the advertising companies. The se- 
quence of the advertising spot is detemiined by a pointer 
in the PPR that refers to the next advertising spot. The 
advertising spots are organized in a data structure that 
can be referred to as chain or (optionally also as ring) 
and the sequence In the chain or ring determines the 
sequence of the advertising spot. There may be a global 
chain or ring with the PPR pointing to one specific ad- 
vertising spot at each time that Is the next advertising 
spot to be shown to the user. There may alternatively 
be a personal advertising data structure per PPR (per 
user) which determines the sequence of advertising 
spots showed to a specific user and can be used for tar- 
geted advertising including the option to change the se- 
quence of advertising dynamically depending on 
events. 

[0119] The MPS system owner can configure the se^ 
quence of advertising spots on a per customer basis in 
a fl xible and dynamic way, he can also change the se- 
quence during an advertising spot depending on certain 
events. 

[0120] During advertising breaks, nomial accounts 
will not be changed - instead accounting steps apply on- 
ly to advertising accounts. If the default for advertising 
steps applies, then one advertising step is executed per 
second and only the advertising accounts are decre- 
mented. If the default does not apply, then the following 
more general method applies: In each advertising step 
the value of the associated decrementor field is sub- 
tracted from the advertising accounts and transferred 
(added) to a counter account (in personal mode an ad- 
vertising account is part of the PPR. in global mode it is 
a system wide account which summarizes the sum of 
all advertising consumed as well as the sum seconds/ 
decre-ments of each advertising spot consumed). This 
way fl is possible in personal mode to view how much 
of which advertising spots each user in personal mode 
has viewed, in global mode, it is only possible to deter- 
mine how much advertising was consumed and of which 
advertising spots, but not by which users. 
[01 21 ] The advertisers can access the system at any 
time over the Internet or another interface and view the 
current value of the global advertising account. This way 
they can study exactly the rate at which the advertising 
campaign is being viewed by the users. They can cor- 
relate this information with parall I activities such as 
feedback collection via telephone polls, real-time statis- 



tics on e-business activities, sales revenues etc. to bet- 
ter fine-tune the campaign. As an additional option the 
system owner can offer to provide anonymised data on 
the customers that viewed the advertising spot and/or 
5 target the advertising on a regional basis or other ano- 
nymised criteria to allow an even better fine-tuning of 
the advertising campaign - in a sense extending the con- 
cept of a regional testmari<et to the Intemet with addi- 
tional criteria that are not regional, but targeted to cer- 
10 tain customer groups as testmarket. 

[0122] The Session Manager Application 14 runs reg- 
ularly (once per accounting step) and executes on all 
PPRs of active users. The operation of the Session 
Manager Application on an individual PPR Is controlled 
IS by the Personal Control Field and the Dynamic Control 
Field. Active users are users that have started a session 
and not yet tenminated It. Session start and session ter- 
mination is done by the RADIUS server on the same 
database. While the session Is active, the Session Man- 

20 ager Application at each accounting step decrements 
the applicable accounts (in default mode the prepaid ac- 
count and the default profile account, in advertising 
mode the advertising-related accounts, in premium 
mode the Maximum Premium Time account and the 

25 Prepaid Account. In sponsor mode (which may coexist 
with the other modes) It also decrements the sponsor 
accounts (global or personal) and transfers the sponsor 
acccounting units to the beneficiary. 
[0123] The "Content and Policy Selection Portal" 30 

30 (PSP) is a user interface over which the user can change 
values In the personal user database - effectively chang- 
ing the user profile (and implicitly the service) during the 
usage session leading to the immediate or delayed start 
of a new part session with a new tariff and potentially ^ 

35 new accounting mode. This allows the user to change 
the accounting mode within a session, e.g. from ac- 
counting on a per minute basis to accounting on a per 
second basis. The user can recharge his prepaid ac- 
count using the PSP. The prepaid account can be 

40 charged and recharged by the user over all common 
payment methods (cash, bank debit, credit card, mobile 
card, telephone bill, etc.). Over the PSP the user can 
control to change his user profile with Immediate effect, 
a fixed delay or bound to a certain event - including a 

45 quasi simultaneous tariff change. Via the PSP, the user 
can selectthe usage profile of the next part-session. Ex- 
amples for usage profiles are the following: 
[0124] Standard: unrestricted usage, Best Effort 
Service, no hacker-protection, no access to protected 

50 Intranet areas without separate authorization, no adver- 
tising breaks that block other activities (basically corre- 
sponds to the most commonly used profiles today). 
[0125] Bronze: like Standard, but with tolerated ad- 
vertising breaks in certain intervals which block other ac- 

55 tivities during the advertising break. 

[0126] Silver: like Bronz , but with improved QoS 
(Quality of Sen/ice) e.g. with higher bandwidth to the 
backbon and in th backbone for this user by giving 
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the traffic of this us r priority treatment relative to bron7e 
service users and standard service users, or by giving 
absolute bandwidth guarantees. 
[01 27] Gold: like Silver, but without interruption by ad- 
vertising breaks. 

[01 28] Children: like Bronze, but with content filtering 
for unwanted content and only with advertising suitable 
to children. 

[0129] Secure Gold: like Gold, but with special net- 
work based firewall that protects against certain popular 
hacker methods (e.g. with anti-spoofing protection). 
[0130] IP-VPN/Intranet: unrestricted usage, potential- 
ly with Premium QoS via guaranteed bandwidth or Diff- 
Serv priorisation when accessing a corporate network, 
automatic membership without separate authorization. 
[0131] Advertising Block: for the duration of the ad- 
vertising block the usage is restricted to the consump- 
tion of advertising in a sequence of advertising spots, 
which can be dynamically changed (add: Voluntary ad- 
vertising viewing) 

[0132] Advertising spot company X: restricted usage 
(only certain IP addresses or web-servers hosting the 
advertising or a subset of these. Potentially in addition 
access to linked wcbpagbs of advertised products for 
direct e-business activities. 

[0133] Sponsored Site of company Y: restricted us- 
age limited to certain content or web-servers, e.g. free 
access for banking transactions with Bank Y which does 
not decrement the prepaid account as long as the user 
is accessing only sponsored content. As soori as the us- 
er Is leaving the sponsored sector, i.e. starts an activity 
not covered under the sponsored user profile, he is be- 
ing warned that he is leaving the sponsored sector and 
that the default tariff will apply in the non-sponsored sec- 
tor from now on. Return to the sponsored sector is pos- 
sible via selection in the PSP. 

[0134] Sponsored by Company Z: limited usage, ac- 
cess only to company Z and to content that company Z 
Is willing to sponsor. The prepald-decrement Is negative, 
as the company Z actually pays the user for accessing 
it's content. Company Z pays accordingly to the owner 
of the MPS. 

[0135] Prepaid-account depleted: there are two vari- 
ants how the depletion of a prepaid account can be han- 
dled: 

1: The user will be disconnected immediately from 
the service and - where applicable (e.g. in dial-in 
scenarios) from the networic as well. 

2: If the system owner has configured it in that way, 
the user can be given a last period of grace during 
which he is being wamed of imminent disconnec- 
tion and be given a last chance to recharg his pre- 
paid account. His us r profile will be limited to view- 
ing the warning of imminent disconnection and of 
recharging his prepaid account (website 32). If the 
last period of grace goes by without the account be- 



ing recharged, the us r will be disconnected from 
the service and where applicable also from the net- 
work. 

5 [0136] Premium Content Gold allowed: usage al- 
lowed to all content including content classified as Gold, 
Silver and Bronze. Possible to access multiple contents 
of multiple classes in parallel. 

[0137] Premium Content Silver allowed: usage al- 
10 lowed to all content including content classified as Silver 
and Bronze. Possible to access multiple contents of 
multiple classes in parallel. 

[0138] Premium Content Bronze allowed: usage al- 
lowed to all content Including content classified as 
t5 Bronze. Possible to access multiple contents of multiple 
classes In parallel. 

[0139] Premium Content exclusive: usage limited to 
access Premium Websites of a certain content provider 
or a very specific content only, such as a baseball game, 

20 but no other content In parallel. The content provider 
may decide to allow access to related websites such as 
e-commerce sites related to the premium content (e.g.. 
DVD purchase of a film after viewing a streaming media 
preview). If the user initiates other activities he will be 

2s warned that he is trying to leave the exclusive premium 
content area and that he shall confirm he wants to return 
to the default sen^ice profile (or continue with premium 
content). 

[0140] At the beginning of a usage session the user 

30 is authorized with a certain profile, which is called his 
default profile. The user may be able to change his de- 
fault profile. The user will retum to his default profile if 
he specifies a maximum time he likes to spent in a pre- 
mium rate profile. The user can select a new profile from 

35 a range of preconfigured profiles with the PSP 30 and 
start a new part-session anytime during the session. Us- 
er profiles are preconfigured In the NSS 20, so the com- 
munications between the PSP and the NSS only needs 
to communicate the selected profile in most cases ex- 

40 cept if a user policy requires additional parameters to 
be handed-over at instruction time. 
[0141] In conjunction with sponsoring, each user may 
have a Sponsoring Receiver Account that can be ac- 
cessed by the external B2B interface 34. This account 
can be Increased by third parties (so-called "Simple 
Sponsors" such as advertisers in retum for a "Page Im- 
pression" or a visit to a website of the advertiser. Alter- 
natively, the sponsor may have the ability to increase 
the prepaid account directly. 

50 [0142] Further, there may be provided a sponsoring 
interface with ability to change the user profile. This in- 
terface has access to the Prepaid Decrcmontor field 44 
in that way that the sponsor can decrease the value of 
thed crem ntor field (which is time dep ndent)andal- 

55 so potentially of a vol um depend ntdecrementor field. 
If the decrementor becomes zero, this effectiv ly repre- 
sents a full sponsoring of the service, effectively a "free" 
sen/ice paid by the sponsor. It is also possible to do a 
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part sponsoring. If the value of the decrementor be- 
connes negative, then the sponsor even goes f urtherand 
pays acccounting units Into the pockets of the user (Into 
his prepaid account at each accounting step, as the sub- 
traction of a negative value increases the prepaid ac- s 
count). The sponsoring interface is allowed to change 
the user profile in return for the sponsoring during the 
sponsored part-session. As an example the sponsoring 
Interface may force the user be able to access only cer- 
tain websites or use certain services while other web- io 
sites or services are blocked for the duration of the spon- 
sored part-session. This feature allows to implement an 
effective advertising financing method with the imple- 
mentation of advertising breaks which resemble the 
business model of the free-TV. i5 
[01 43] If the user Is trying to leave a sponsored sector. 
I.e. If he is violating the policy set on behalf of the spon- 
sor in exchange for sponsoring, he Is directed to a Spon- 
sor-Exil Website. Here, the user gets warned thai he is 
leaving sponsored sector and gets a choice to continue 20 
in the sponsored sector or will be forwarded to the Policy 
Selection Portal 30. 

[01 44] Optionally, there may further be provided an e- 
Businoss Transactions Interface (B2B Interface), which 
the user can use for payment at other websites such as 2S 
auction sites or barter sites. The payment or barter or 
exchange or auction or donation transaction may be ex- 
ecuted in any of the acccounting units except time and 
unit value 1 . This may be used for microtransactions (e. 
g. micropayment. microbarter, microauction. microex- 30 
change, microdonation). A sponsor could specify that 1 
MPS-unit (e.g. one prepald-mlle) will be donated with 
every advertising spot viewed to a third party such as a 
non-government organization like Greenpeace. When 
viewing or otherwise consuming premium content, such 35 
as music, the viewer can have an option to donate di- 
rectly to the artist who created the viewed or otherwise 
consumed Intellectual property. This interface can also 
be used to influence the value of acccounting units via 
dynamic conversion tables. 40 
[0145] To give an impression, how the system de- 
scribed above may appearfrom the viewpoint of the us- 
er, Fig. 5 illustrates an example of a user screen 82. As 
usual, the main part of the screen is occupied by the 
web page 84, which the user Is ciJn-ently visiting. In the 45 
example shown, it is assumed that this web page 84 Is 
a page thai is sponsored by a company XY. Below the 
web page 84, a message 86 informs the user about the 
service profile he is currently using. In the present case, 
the message 86 says: "Sponsored by company XY". so 
Thus, the user is informed that he watches the web page 
84 at a reduced price or even cost-free. Optionally, the 
current tariff may be indicated as well. 
[01 46] A button 88 "Change Profile" can b clicked by 
the user if h wants to switch to anoth r servic profile. 55 
Then, the user will be directed to the Content and Policy 
Selection Portal 30 shown in Fig. 1 . 
[01 47] Another button 90 "View Accounts" permits the 



user to check the current status of his prepaid account 
and any possible other accounts. The Information made 
available in this way is updated essentially in real-time, 
i.e. after each accounting step interval. 
[0148] A message 92 Indicates the current tariff, and 
a number of buttons 94 provide short-cuts for quickly 
changing to other profiles such as "Privacy", "Account- 
ability", "Gold" and "Silver". 



Claims 

1. Method of providing telecommunications servic- 
es, wherein users are authentk:ated and authorized 
to a first servk:e profile before a user session starts, 
characterized in that the service profile Is dynam- 
k:ally varied in the course of the session. 

2. Method according to claim 1 . wherein the service 
profile is dynamically varied by selecting one of a 
plurality of predefined service profiles. 

3. Method according to claim 1 or 2, wherein the 
service profile is changed in response to a com- 
mand entered by the user. 

4. Method according to claim 1 or 2, wherein the 
service profile is changed by changing at least one 
pararneter out of a pluraliy of parameters specifying 
said profile. 

5. Method according to any of the preceding claims, 
wherein the service profile is changed in response 
to a command that is generated automatically In the 
network control system after the lapse of a prede- 
termined time interval or in response to the occur- 
rence of a predetemiined event. 

6. Method according to claim 5, wherein the event 
causing an automatic change of the service profile 
is the depletion of an account In a personal record 
of the user. 

7. Method according to claim 5 or 6, wherein one of 
the service profiles restricts the access of the user 
to advertising information. 

8. Method according to any of the preceding claims, 
wherein accounts of the users are changed in a se- 
quence of accounting steps that are performed in 
regular intervals. 

9. Method according to claim 8, wherein user 
records stored in a personal user data base each 
include a prepaid account and a decrementor field 
specifying the amount of accounting units that is 
subtracted from the prepaid account in each ac- 
counting step, and wherein the contents of the dec- 
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rementor field are changed in accordance with the sen/ice profile, and changes the service profit in 

service profile. response thereto. 



10. Method according to claim 9, wherein the con- 
tents of the decrementor field are updated in each 5 
accounting step Interval, depending on the services 
that have been rendered in the past interval. 

11. Method according to any of the preceding 
claims, wherein users consume network services In io 
the fomn of service units having each a specific val- 
ue that is expressed in accounting units, each user 
has at least one account that is incremented or dec- 
rennented essentially In real-time and In accordance 
with the service units being consumed, character- is 
Ized by transactions In which a positive or negative 
amount of accounting units Is transferred from an 
account of a user to another account. 

12. Method according to claim 11 , wherein the ac- 
counts of the users are changed only in the form of 
transactions in which an amount of accounting units 
is transferred from one account to another, so that 
the total sum over all accounts remains constant. 

25 

13. Method according claim 11 or 12, wherein global 
accounts are provided in addition to personal ac- 
counts of each user, and, in a privacy mode, trans- 
actions consist of transferring accounting units from 

a personal account of a user to one or more global 30 
accounts. 

14. Method according to any of the claims 1 1 to 13, 
wherein, in an accountability mode, transactions 
consist of transferring accounting units only from 35 
one account of the user to another account of the 
same user. 



19. Control system for a telecommunications net- 
work, comprising a user database storing, for each 
user, at least one account and a decrementor field, 
the system further comprising an accounting logic 
for updating in regular accounting step intervals of 
not more than one minute the accounts of all users 
presently authenticated to a network service, 
wherein updating includes a step of subtracting the 
contents of the decrementor field of the user from 
the account of the same user, said accountig logic 
being arranged for dynamically changing the con- 
tents of the decrementor fields of the authenticated 
users. 

19. Control system for a telecommunications net- 
work, comprising a user database storing, for each 
user, at least one account and a decrementor field, 
the system further comprising an accounting logic 
for updating in regular accounting step intervals of 
not more than one minute the accounts of all users 
presently authenticated to a network service, 
wherein updating includes a step of subtracting the 
contents of the decrementor field of the user from 
the account of the same user, said accountig logic 
being arranged for subtracting an amount from an 
account of a user and adding this amount In the 
same accountig step to one of another account of 
the same user, an account of another user or a glo- 
bal account that Is not assigned to a specific user. 



15. Method according to any of the claims 11 to 14. 
comprising a step of displaying the cun-ent status of 40 
an account of the user on a user's display screen. 

16. Method according to any of the claims 11 to 15, 
comprising a step of displaying a tariff, that is 
charged for the current service, on a user's display 45 
screen. 



17. Method according to any of the preceding 
claims, comprising a step of displaying a service 
profile indication identifying the service profile cur- so 
rently being used by a user on a user's display 
screen. 



18. Control system for a t lecommunications net- 
work, comprising a d cision logic which, when a us- ss 
er has been authenticated for a session, checks 
throughout the session whether a predet rmined 
event has occurred, which requires a change of a 
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